Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
trumpdong
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
5 ms
·
61.
▲
by
trumpdong
4mo ago
It works like this. The US gov sends LE a nastygram saying they must terminate service to sanctioned entities. LE either does that or several people go to jail. The USgov doesn't care how it happens, as long as they can't find any
62.
▲
by
trumpdong
4mo ago
Yes, of course it could and it will. I don't think the US government has ever missed an opportunity to be corrupt and break shit for stupid reasons.
63.
▲
by
trumpdong
4mo ago
In the EU there is the threat of jail time if a user of your service does something bad and you haven't completed the necessary bureaucracy to be immune to it. This is the opposite of the US. See for example pissmail.
64.
▲
by
trumpdong
4mo ago
The US is an oligarchy. Voting in the US is completely irrelevant to which laws pass - there have been studies about this.
65.
▲
by
trumpdong
4mo ago
Before this, they were all unencrypted and you had to pay to get a cert. I guess we could go back to that - now knowing that every unencrypted connection is being MITMed (the world is so much more hostile now)...
66.
▲
by
trumpdong
4mo ago
Sounds like the sanctions worked.
67.
▲
by
trumpdong
4mo ago
I think the point is people are getting sanctioned for arbitrarily stupid reasons these days.
68.
▲
by
trumpdong
4mo ago
I said hi to an Iranian today. Lets see if LE revokes my website.
69.
▲
by
trumpdong
4mo ago
Yes actually you still could've. But it would require a pass through the IETF to stabdaddize a DNS record type, and that would delay Netscape's release.
70.
▲
by
trumpdong
4mo ago
It means they prevent, unless you perform several undocumented arcane rituals.
71.
▲
by
trumpdong
4mo ago
If each country could only sign its own domains it would make sense. If the US could only tamper with .us domains the system could be trusted in general. After all, that's no worse than what they already do by coming to your house and
72.
▲
by
trumpdong
4mo ago
Domain registries can already get a certificate for your domain by changing the address to their own server temporarily and then doing ACME with LE. So no new vector is introduced by directly putting the cert in DNS.
73.
▲
by
trumpdong
4mo ago
That's worse, because ICANN is effectively the US government.
74.
▲
by
trumpdong
4mo ago
CT seems useless for DANE because the cert is self signed, so anyone can just flood the CT with self signed certs for your website. It's useful with WebPKI because only certs signed by a CA go in CT and it's a big deal if one is m
75.
▲
by
trumpdong
4mo ago
Why didn't the university just ignore the terms of service?
76.
▲
by
trumpdong
4mo ago
What if the branch in Iran was the main branch?
77.
▲
by
trumpdong
4mo ago
We all knew something like this was coming when we decided to centralise the web around Let's Encrypt. In reality of course you can probably just ignore this as long as you request the certificate from a proxy in a nonsanctioned countr
78.
▲
by
trumpdong
4mo ago
I think the only way to deal with that right now is to hire a company whose job is to deal with it. They'll random-check your outgoing emails are indeed what you say they are, and they maintain a reputation with the big providers for c
79.
▲
by
trumpdong
4mo ago
There's something you can do in between - you can check the domain has an MX record.
80.
▲
by
trumpdong
4mo ago
That was revoked some years ago.
81.
▲
by
trumpdong
4mo ago
If you try to create a Discord account with Firefox Klar as your default browser, on Android, immediately upon signing up you'll be banned. I have to assume this is because it clears cookies and thinks you're a bot farm.
82.
▲
by
trumpdong
4mo ago
Reasonable, yes, but they won't happen, because prosecutors never prosecute themselves.
83.
▲
by
trumpdong
4mo ago
You know what does this better than a humanoid robot? A toilet with a built-in dispenser for mild chemicals! It could do it periodically, or with every flush so that the mild cleaning chemicals are always sitting there. An unsophisticated o
84.
▲
by
trumpdong
4mo ago
Indeed. It says they rely on two different substances which normally don't mix (nitrates and sulfites), presumably because if they were both present at the same time they'd react with each other directly without the bacterium extr
85.
▲
by
trumpdong
4mo ago
You only get to choose a half. The previous guy chooses the quadrant.
86.
▲
by
trumpdong
4mo ago
You could work at Palantir and leak details, and I don't think thats what this discussion is about. If you wanted to destroy a company from the inside by whatever means, you'd have to get hired there.
87.
▲
by
trumpdong
4mo ago
Face scan to sign in. Or watching cocomelon all day.
88.
▲
by
trumpdong
4mo ago
That's a social network
89.
▲
by
trumpdong
4mo ago
I can't tell if this is sarcasm.
90.
▲
by
trumpdong
4mo ago
If you want to get rich quick there's a huge lesson here: sell to children early. If you can get 5-year-olds hooked on your product and growing up thinking it's the only way to do things, they will give you a huge amount of money
More ›